Results 1 to 4 of 4
Thread: OSCommerce sites compromised
Threaded View
-
08-12-2009, 10:38 AM #1WHT Addict
- Join Date
- Mar 2009
- Location
- Dublin/Wicklow
- Posts
- 146
OSCommerce sites compromised
hi all,
I have three OSCommerce sites running on a reseller UNIX account.
I discovered that there were strange PHP files on all three installations. I have deleted the files, and kept one locally to poke around in.
This seems to be quite common and is caused by having 777 permissions on the folders that need to have images etc uploaded to them. I have changed them to 755 for the time being, but now OSCommerce can't write to these folders, so customers can't add product photos.
This page says the following:
Set the permissions on ALL folders to 755. If your host has PHP installed as CGI through suExec (the proper method), then your site will run fine this way. If they have PHP installed as a module, you will get a warning from oscommerce saying that it is unable to write to the images folder. Setting permissions back to 777 will make the message go away but it will leave you open to an attack.
My host has told me that customers should use cpanel or FTP to upload product images, which I've told them is not an option. Waiting for their reply.
thanks in advance,
Eoin
Similar Threads
-
[for hire] - designer - psd slicing $25 /logos $50 /sites $175/osCommerce integration
By riotdesigns in forum Employment / Job OffersReplies: 1Last Post: 01-18-2005, 12:19 PM -
[for hire] - designer - psd slicing $25 /logos $50 /sites $175/osCommerce integration
By riotdesigns in forum Employment / Job OffersReplies: 0Last Post: 12-08-2004, 02:49 AM -
[for hire] - designer - psd slicing $25 /logos $25 /sites $175/osCommerce integration
By riotdesigns in forum Employment / Job OffersReplies: 1Last Post: 11-24-2004, 11:02 AM -
osCommerce - any reviews in Magazines or other sites?
By seiretto in forum Hosting Software and Control PanelsReplies: 4Last Post: 04-15-2003, 12:04 PM -
osCommerce - any reviews in Magazines or other sites?
By seiretto in forum Web HostingReplies: 3Last Post: 04-15-2003, 09:40 AM